verify

Verify that the specified transaction token value (retrieved from an
incoming request) is a valid transaaction token. In addition, remove it
from any stored cache of tokens, so that it may not be reused.